CVE-2026-100379: Wikimedia Foundation Wikipedia Android App

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Wikipedia Android App allows Accessing/Intercepting/Modifying HTTP Cookies. This issue affects Wikipedia Android App: main.

Affected products

Published 2026-09-25. Last modified 2026-09-28.